SlowMist Cosine: Pendle whale lost over $1.3 million, likely due to their created contract allowing anyone to call it

According to ChainCatcher, SlowMist’s Cosine explained the details of the recent theft involving a large Pendle holder on the X platform. Pendle officials have confirmed that the protocol itself was not attacked. Analysis of the incident revealed that the contract created by the large Pendle holder on Morpho Flash Loan could be called by anyone. This holder had also delegated their position to this contract. The hacker exploited this by calling the large holder’s Morpho Flash Loan contract, and subsequently launched attacks targeting the AAVE and Pendle positions. In the end, the Pendle whale suffered losses exceeding $1.3 million.